Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
File: ZhaRypxY0IWba4cCMLD1gb5mpYo.mft (raw, json)
Hash identifier: tHxT0UBkIqt3YsE+9ykOEe3XmaRpebsN/JQ6mdX4fcw=
Subject key identifier: A2:D5:4A:1B:FE:1A:2D:70:32:5C:4B:98:DE:77:83:10:D8:E2:73:E9
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial: 0199FE1031F8B6141C55396AA6DBE2B4E705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
Manifest number: 1040
Signing time: Sun 19 Oct 2025 20:01:38 +0000
Manifest this update: Sun 19 Oct 2025 20:01:38 +0000
Manifest next update: Mon 20 Oct 2025 20:01:38 +0000
Files and hashes: 1: Rq-lqv8nvaGlsC79el8fMA5_1rc.roa (hash: T0ctud47vtW/7aXgZpP0x6VHkVLrf38PbYskxMdhNRg=)
2: X_fPOs6YAZH2TT4IWQcW6KOL-FY.roa (hash: bxGSJtgvXh/lnDA0x6ePZz0W8ihJege1t3FViWTKXLY=)
3: ZhaRypxY0IWba4cCMLD1gb5mpYo.crl (hash: E0tkHOZ4RfcRPVmMGSfcRDYO37FpCnyaY5HbOfZOoAY=)
4: byX4XqUIEmVjtSF74Vja9liWXww.roa (hash: 6RlIk6GXgp36HBDBBcA87k4kHMHfV998BVRCjiswL3U=)
5: z7EntH2_RgrImndWaf9CHwQF-tM.roa (hash: At0xjBHWEf4xXBr9D4SeVUGhACOqx602brOEncq8KCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:31:f8:b6:14:1c:55:39:6a:a6:db:e2:b4:e7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
Validity
Not Before: Oct 19 20:01:38 2025 GMT
Not After : Oct 20 20:01:38 2025 GMT
Subject: CN=a2d54a1bfe1a2d70325c4b98de778310d8e273e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:d3:e3:a5:d0:d6:f8:ef:75:e3:9a:5a:2e:
ca:e0:72:ff:34:d8:20:16:54:ad:a6:03:86:f1:0e:
11:65:d2:b4:21:b0:8b:ed:28:a3:36:61:9e:59:37:
2b:22:3b:5b:b2:9e:c7:6c:09:ee:e8:34:58:f9:e2:
43:96:5e:ee:68:e6:82:35:f8:2f:56:f4:2e:92:80:
89:23:c5:31:87:f0:6d:2d:8b:db:99:e3:35:f7:43:
f1:8e:7a:1b:a1:3a:e4:41:cf:94:0f:aa:20:9f:d1:
a3:91:76:ea:87:6d:ed:58:a1:c2:d0:46:9c:d1:c0:
c4:49:3f:9b:0d:2a:e2:17:1d:79:e3:8a:15:55:b1:
23:a1:16:7d:25:25:e8:f1:01:32:52:ae:27:7a:a9:
19:71:35:6f:b9:4b:9d:ca:b4:a1:9b:53:19:f7:c6:
e8:d9:74:05:08:e1:14:6d:a6:d9:57:de:d0:51:71:
07:d0:97:2e:35:7b:97:2c:a3:45:f3:32:46:70:3f:
df:35:32:2a:2a:2c:6b:07:53:21:79:5a:aa:ad:16:
86:ac:ae:fb:77:3b:00:0f:da:e6:ef:76:57:45:d7:
96:57:2b:0e:e0:76:44:b1:b9:48:e1:f8:fa:00:5c:
dd:3f:89:6b:60:2e:ab:e3:ea:a9:18:f0:46:d3:00:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D5:4A:1B:FE:1A:2D:70:32:5C:4B:98:DE:77:83:10:D8:E2:73:E9
X509v3 Authority Key Identifier:
keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:95:d0:ac:eb:5a:1d:84:e6:06:bb:27:45:71:d8:ce:12:45:
d2:c5:ae:0f:d8:31:81:b0:7c:d5:32:06:17:ce:90:8b:24:36:
da:40:e4:65:06:4e:3e:ab:84:3c:f2:29:ed:46:43:3b:0d:4b:
cc:38:71:e7:4c:df:ee:58:f1:a4:f7:fc:46:bb:5b:17:79:62:
01:bb:e7:a7:dd:f9:aa:6e:eb:88:bd:e2:c2:e1:33:46:5b:3d:
09:17:80:7f:28:23:09:73:f8:40:ae:65:ad:51:4b:dc:19:f0:
12:71:52:92:e7:20:97:26:59:0d:41:32:87:83:89:f1:f2:81:
d8:65:87:ba:af:f5:a5:6b:3a:80:2d:2f:e9:dd:e3:59:52:e5:
22:63:1e:88:d4:75:b8:25:d7:48:f9:8e:54:4a:03:1c:dd:aa:
0e:57:3d:71:9b:90:f6:95:c9:b7:28:51:e8:52:7d:f3:ba:d8:
f5:76:21:a8:8d:21:01:3f:55:34:f9:b1:e7:35:60:f6:9b:ff:
04:0f:83:52:a1:84:73:ff:87:53:37:63:46:6f:c1:94:89:38:
b6:a3:c3:6d:0d:9c:57:65:5a:b9:c9:18:63:b6:96:7d:eb:f0:
67:9c:84:85:29:72:de:51:11:1f:56:02:5f:40:55:17:59:79:
24:4b:e0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:30:39 2025 by rpki-client